This is an automated email from the ASF dual-hosted git repository.

mck pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/cassandra-builds.git

commit 9ffe201ce0d33dd544c85030c2261883ac73aadc
Author: mck <[email protected]>
AuthorDate: Thu May 25 17:37:56 2023 +0200

    Debian packaging source should exclude git subdirectory, bullseye sources 
reduced, add docker unsecured for git cloning
    
     patch by Mick Semb Wever; reviewed by Brandon Williams for CASSANDRA-18552
---
 build-scripts/cassandra-deb-packaging.sh | 6 +++---
 build-scripts/cassandra-rpm-packaging.sh | 4 ++--
 docker/build-debs.sh                     | 2 +-
 docker/bullseye-image.docker             | 7 ++-----
 4 files changed, 8 insertions(+), 11 deletions(-)

diff --git a/build-scripts/cassandra-deb-packaging.sh 
b/build-scripts/cassandra-deb-packaging.sh
index 4ecf884..59a0418 100755
--- a/build-scripts/cassandra-deb-packaging.sh
+++ b/build-scripts/cassandra-deb-packaging.sh
@@ -19,7 +19,7 @@ java_version=$2
 # variables, with defaults
 [ "x${deb_dir}" != "x" ] || deb_dir="`pwd`"
 [ "x${cassandra_builds_dir}" != "x" ] || cassandra_builds_dir="`pwd`"
-[ "x${CASSANDRA_GIT_URL}" != "x" ] || 
CASSANDRA_GIT_URL="https://gitbox.apache.org/repos/asf/cassandra.git";
+[ "x${CASSANDRA_GIT_URL}" != "x" ] || 
CASSANDRA_GIT_URL="https://github.com/apache/cassandra.git";
 [ "x${java_version}" != "x" ] || java_version="8"
 
 # pre-conditions
@@ -35,10 +35,10 @@ docker image prune --all --force --filter 
label=org.cassandra.buildenv=bullseye
 pushd $cassandra_builds_dir
 
 # Create build images containing the build tool-chain, Java and an Apache 
Cassandra git working directory, with retry
-until docker build --build-arg CASSANDRA_GIT_URL=$CASSANDRA_GIT_URL 
--build-arg UID_ARG=`id -u` --build-arg GID_ARG=`id -g` -t 
cassandra-artifacts-bullseye:${sha} -f docker/bullseye-image.docker docker/  ; 
do echo "docker build failed… trying again in 10s… " ; sleep 10 ; done
+until docker build --security-opt seccomp=unconfined --build-arg 
CASSANDRA_GIT_URL=$CASSANDRA_GIT_URL --build-arg UID_ARG=`id -u` --build-arg 
GID_ARG=`id -g` -t cassandra-artifacts-bullseye:${sha} -f 
docker/bullseye-image.docker docker/  ; do echo "docker build failed… trying 
again in 10s… " ; sleep 10 ; done
 
 
 # Run build script through docker (specify branch, tag, or sha)
-docker run --rm -v "${deb_dir}":/dist -v 
~/.m2/repository/:/home/build/.m2/repository/ 
cassandra-artifacts-bullseye:${sha} /home/build/build-debs.sh ${sha} 
${java_version}
+docker run --security-opt seccomp=unconfined --rm -v "${deb_dir}":/dist -v 
~/.m2/repository/:/home/build/.m2/repository/ 
cassandra-artifacts-bullseye:${sha} /home/build/build-debs.sh ${sha} 
${java_version}
 
 popd
diff --git a/build-scripts/cassandra-rpm-packaging.sh 
b/build-scripts/cassandra-rpm-packaging.sh
index 3ed2255..2dec6ed 100755
--- a/build-scripts/cassandra-rpm-packaging.sh
+++ b/build-scripts/cassandra-rpm-packaging.sh
@@ -46,9 +46,9 @@ docker image prune --all --force --filter 
label=org.cassandra.buildenv=${dist_na
 pushd $cassandra_builds_dir
 
 # Create build images containing the build tool-chain, Java and an Apache 
Cassandra git working directory, with retry
-until docker build --build-arg CASSANDRA_GIT_URL=$CASSANDRA_GIT_URL 
--build-arg UID_ARG=`id -u` --build-arg GID_ARG=`id -g` -t 
cassandra-artifacts-${dist_name}:${sha} -f docker/${dist_name}-image.docker 
docker/  ; do echo "docker build failed… trying again in 10s… " ; sleep 10 ; 
done
+until docker build --security-opt seccomp=unconfined --build-arg 
CASSANDRA_GIT_URL=$CASSANDRA_GIT_URL --build-arg UID_ARG=`id -u` --build-arg 
GID_ARG=`id -g` -t cassandra-artifacts-${dist_name}:${sha} -f 
docker/${dist_name}-image.docker docker/  ; do echo "docker build failed… 
trying again in 10s… " ; sleep 10 ; done
 
 # Run build script through docker (specify branch, tag, or sha)
-docker run --rm -v "${rpm_dir}":/dist -v 
~/.m2/repository/:/home/build/.m2/repository/ 
cassandra-artifacts-${dist_name}:${sha} /home/build/build-rpms.sh ${sha} 
${java_version} ${rpm_dist}
+docker run --security-opt seccomp=unconfined --rm -v "${rpm_dir}":/dist -v 
~/.m2/repository/:/home/build/.m2/repository/ 
cassandra-artifacts-${dist_name}:${sha} /home/build/build-rpms.sh ${sha} 
${java_version} ${rpm_dist}
 
 popd
diff --git a/docker/build-debs.sh b/docker/build-debs.sh
index 474bfb2..a438050 100755
--- a/docker/build-debs.sh
+++ b/docker/build-debs.sh
@@ -136,7 +136,7 @@ set -e
 until ( echo "y" | sudo mk-build-deps --install ) ; do echo "mk-build-deps 
failed… trying again after 10s… " ; sleep 10 ; done
 
 # build package
-dpkg-buildpackage -rfakeroot -uc -us
+dpkg-buildpackage -rfakeroot -uc -us --source-option=--tar-ignore=.git
 
 # Copy created artifacts to dist dir mapped to docker host directory (must 
have proper permissions)
 cp ../cassandra[-_]* $DEB_DIST_DIR
diff --git a/docker/bullseye-image.docker b/docker/bullseye-image.docker
index 6e0c342..728b107 100644
--- a/docker/bullseye-image.docker
+++ b/docker/bullseye-image.docker
@@ -26,16 +26,13 @@ RUN echo 'Acquire::ftp::Timeout "60";' >> 
/etc/apt/apt.conf.d/80proxy.conf
 RUN until apt-get update && apt-get -y install ant build-essential curl 
devscripts git python2 sudo ; \
     do echo "apt failed… trying again in 10s… " ; sleep 10 ; done
 
-RUN echo 'deb http://deb.debian.org/debian bullseye main' >> 
/etc/apt/sources.list \
-    && echo 'deb http://deb.debian.org/debian sid main' >> 
/etc/apt/sources.list
+RUN echo 'deb http://deb.debian.org/debian sid main' >> /etc/apt/sources.list
 
 RUN until apt-get update \
     && apt-get install -y --no-install-recommends openjdk-8-jdk openjdk-11-jdk 
openjdk-17-jdk ; \
     do echo "apt failed… trying again in 10s… " ; sleep 10 ; done
 
-RUN sed -i '$d' /etc/apt/sources.list \
-    && apt-get update \
-    && update-java-alternatives --set java-1.8.0-openjdk-$(dpkg 
--print-architecture)
+RUN update-java-alternatives --set java-1.8.0-openjdk-$(dpkg 
--print-architecture)
 
 # dh-python is incompatible with python-is-python2, so we'll link it ourselves
 RUN ln -s /usr/bin/python2 /usr/bin/python


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to